Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          86SQ+yAFmWONwrgrUVAcD/ZBYgh6wDiBLPSfS1DN+hY=
Subject key identifier:   89:4F:32:A7:E6:76:FD:F1:7B:58:65:3F:7C:79:68:96:C7:B7:04:B2
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       01965B02E384E65281BF425A1C42658AD634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          1500
Signing time:             Tue 22 Apr 2025 01:00:38 +0000
Manifest this update:     Tue 22 Apr 2025 01:00:38 +0000
Manifest next update:     Wed 23 Apr 2025 01:00:38 +0000
Files and hashes:         1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=)
                          2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: yNVl8R4fl5aXLTIpotqO5/XCk1cW6a/nLzVsgLY+7K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:02:e3:84:e6:52:81:bf:42:5a:1c:42:65:8a:d6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Apr 22 01:00:38 2025 GMT
            Not After : Apr 23 01:00:38 2025 GMT
        Subject: CN=894f32a7e676fdf17b58653f7c796896c7b704b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:3d:4b:54:25:cb:65:ff:71:fb:a6:68:d1:
                    2b:a6:56:a4:e6:39:54:2e:c0:d6:03:34:6e:24:fc:
                    86:e9:27:a5:f2:37:dc:0a:5d:96:40:d1:6f:90:83:
                    f6:30:08:e8:f1:91:8b:dd:b6:28:95:b6:ca:9a:09:
                    bb:77:89:af:c3:86:ee:7d:f5:10:99:87:ca:99:93:
                    92:28:c0:6a:79:bb:6c:99:df:36:33:a5:86:01:4b:
                    c3:a8:8f:cf:dc:16:a6:09:b5:7f:2a:99:ff:04:5a:
                    91:3c:58:c2:a3:04:fa:21:7c:8b:4a:33:d2:3c:ac:
                    f7:66:e0:80:79:b0:1d:0c:a1:ef:0f:23:b5:47:e4:
                    4c:15:bc:e8:09:57:05:32:0c:82:66:79:75:a5:64:
                    5c:6d:75:28:19:8e:16:2c:73:0d:4a:fa:56:7a:02:
                    4a:fd:76:20:6f:a0:a5:e9:4b:b2:7b:eb:f9:da:91:
                    2c:d8:73:0b:c7:17:30:1e:5b:49:23:b3:2f:13:ef:
                    69:fe:f5:eb:18:48:9d:2d:4e:17:91:74:a3:19:9c:
                    a3:a1:13:5c:79:81:a5:0f:73:15:9b:49:ff:57:58:
                    ee:67:9a:4e:cb:3e:ca:4a:79:2d:b8:58:78:dc:85:
                    00:11:39:1a:85:dd:92:ed:38:f4:ac:81:a2:50:e7:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:32:A7:E6:76:FD:F1:7B:58:65:3F:7C:79:68:96:C7:B7:04:B2
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:20:19:d1:02:5e:60:be:cf:d5:e2:65:01:0a:5b:0b:9e:
         0d:42:79:4e:79:90:29:e8:b1:fc:fc:52:35:69:df:5d:50:1c:
         97:84:92:bf:4b:6f:13:06:f3:d3:0e:e8:53:be:33:e6:4e:6a:
         54:93:7a:c5:dc:f4:74:ed:f9:c6:e6:dc:43:ec:58:1d:a8:60:
         c3:d5:0a:99:c2:25:17:00:d3:57:5c:26:d4:b7:88:0c:4f:d9:
         54:60:20:e8:8f:2f:e6:b9:8b:10:a3:06:ec:de:fc:d6:49:71:
         f1:c2:c4:6c:99:a4:ff:ef:be:f7:dd:44:d6:c2:b4:00:36:9d:
         6d:4c:c5:3d:40:8d:8d:05:85:46:c8:ff:ec:88:a0:af:d9:cd:
         4c:00:39:24:fb:67:2e:fa:c9:b2:bb:7e:96:f9:50:61:2f:81:
         4e:e2:81:ab:e3:b4:4d:b0:a1:25:0e:bd:9a:62:ab:0f:8a:47:
         99:d9:60:49:73:2f:1e:46:4d:ac:e1:04:0f:70:b2:4a:13:c7:
         eb:20:be:81:1b:79:b4:cd:b3:78:33:d5:51:3a:b1:56:fa:c6:
         25:4d:a8:90:6f:df:ae:60:49:8e:2e:d2:4d:24:23:9e:93:4b:
         45:83:97:9e:bf:e7:0e:48:7c:9f:de:d4:f1:3e:b0:38:29:da:
         ea:2c:f8:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAuOE5lKBv0JaHEJlitY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh
YmY0NzgwHhcNMjUwNDIyMDEwMDM4WhcNMjUwNDIzMDEwMDM4WjAzMTEwLwYDVQQD
Eyg4OTRmMzJhN2U2NzZmZGYxN2I1ODY1M2Y3Yzc5Njg5NmM3YjcwNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV09S1Qly2X/cfumaNErplak5jlU
LsDWAzRuJPyG6Sel8jfcCl2WQNFvkIP2MAjo8ZGL3bYolbbKmgm7d4mvw4buffUQ
mYfKmZOSKMBqebtsmd82M6WGAUvDqI/P3BamCbV/Kpn/BFqRPFjCowT6IXyLSjPS
PKz3ZuCAebAdDKHvDyO1R+RMFbzoCVcFMgyCZnl1pWRcbXUoGY4WLHMNSvpWegJK
/XYgb6Cl6Uuye+v52pEs2HMLxxcwHltJI7MvE+9p/vXrGEidLU4XkXSjGZyjoRNc
eYGlD3MVm0n/V1juZ5pOyz7KSnktuFh43IUAETkahd2S7Tj0rIGiUOe8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlPMqfmdv3xe1hlP3x5aJbHtwSyMB8GA1UdIwQY
MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt
N2M0NDViM2Y5ZmMzLzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz
LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdQgGdEC
XmC+z9XiZQEKWwueDUJ5TnmQKeix/PxSNWnfXVAcl4SSv0tvEwbz0w7oU74z5k5q
VJN6xdz0dO35xubcQ+xYHahgw9UKmcIlFwDTV1wm1LeIDE/ZVGAg6I8v5rmLEKMG
7N781klx8cLEbJmk/+++991E1sK0ADadbUzFPUCNjQWFRsj/7Iigr9nNTAA5JPtn
LvrJsrt+lvlQYS+BTuKBq+O0TbChJQ69mmKrD4pHmdlgSXMvHkZNrOEED3CyShPH
6yC+gRt5tM2zeDPVUTqxVvrGJU2okG/frmBJji7STSQjnpNLRYOXnr/nDkh8n97U
8T6wOCna6iz4/g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:02 2025 by rpki-client